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As I leave the Office of the Information 
and Privacy Commissioner to take up a 
new challenge as Chief Judge of the Pro- 
vincial Court, Criminal Division, I would 
like to use this opportunity to share some 
reflections on freedom of information 
and protection of privacy in Ontario after 
2 1/2 years. 


As I look back over the past 2 1/2 years, I 
am impressed at the number of issues that 
have been dealt with by the agency in 
orders and recommendations. The 
agency has made a considerable contribu- 
tion to jurisprudence in this area. We 
have dealt with many difficult issues, in- 
cluding fees, personal information, solici- 
tor-client privilege and trade secrets. The 
orders that have been issued have formed 
a substantial body of precedent, useful for 
this agency and other agencies in this 
country and elsewhere. 


In terms of our privacy mandate, we have 
been actively involved in a number of 
issues. The agency has released Guide- 
lines on Facsimile Transmission Secu- 
rity, a set of proposals for the use of fac- 
similes in provincial government offices; 
and HIV/AIDS in the Workplace, a set of 
privacy principles for employers and 
employees dealing with the sensitive issue 
of HIV/AIDS in the workplace setting. 
We have also conducted reviews of rec- 
ords management practices in a number 
of ministries, and investigations of pri- 
vacy-related issues when the occasion 
arose. 
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In terms of procedures, advancements 


have been considerable. When the agency 
began its work, we had nothing but the 
bare language of the Freedom of Informa- 
tion and Protection of Privacy Act, 1987 
with which to work. We successfully de- 
signed an appeals procedure that has been 
accepted by the community: the govern- 
ment, appellants and lawyers working 
with the Act. I am also gratified at the 
smooth way in which the process works, 
particularly with the success of our media- 
tion efforts. More than half of all appeals 
continue to be settled through the media- 
tion efforts of the appeals staff. 


One of the areas where we have made 
much progress is in the Commissioner’s 
Office itself. Just 2 1/2 years old, it is a fully- 
functioning, mature agency; with systems 
and structures in place to meet the chal- 
lenges of dealing with appeals to provin- 
cial ministries and agencies. In addition, 
the right people are in place in the agency 
-- a good team that makes everything 
come together. 


The agency has a five-year strategic plan 
in place, both to give a sense of the prog- 
ress made to date, and to assist the agency 
in meeting the challenges of the implem- 
entation of the municipal legislation. 
Considerable advances have also been 
made in technology: each staff member 
has acomputer terminal at his or her desk, 
and computer systems have been devel- 
oped to deal with all aspects of the 
agency’s work. 


@ 
MS 


LUE 51 1999 | 


Finally, I leave the agency with a feeling of 
optimism about the future. The Office of 
the Information and Privacy Commis- 
sioner is ready to meet the challenges of 
the coming months, including those asso- 
ciated with the 3,000 local government 
bodies who will be covered by the munici- 
pal legislation in January 1991. 


The office systems, structure and staff 
complement are being put in place to 
meet these new demands, and I have every 
confidence that positive working rela- 
tionships will be the result of all these 
efforts. 


Before the provincial legislation became 
a reality, there was a certain amount of 
apprehension on the part of both govern- 
ment and the public regarding the poten- 
tial for misuse -- concerns about excessive 
secrecy, denial of access and other issues. 
The reality after 2 1/2 years is a productive 
relationship between the Office of the 
Information and Privacy Commissioner 
and the Freedom of Information and Pri- 
vacy Branch of Management Board and 
with the ministries and agencies covered 
by the Act. 


These successes lead me to applaud the 
government for its support of the prin- 
ciples of freedom of information and 
protection of privacy, and for its contin- 
ued demonstration of support for the 
philosophy and principles of the Freedom 
of Information and Protection of Privacy 
Act, 1987. 


During his 2-1/2 year tenure as Informa- 
tion and Privacy Commissioner, Sidney 
Linden issued several decisions that de- 
fined an institution’s procedural obliga- 
tions in complying with the Freedom of 
Information and Protection of Privacy Act, 
1987. Decisions concerning procedural 
matters have far-reaching implications 
for the procedural operation of institu- 
tions related to the Act. This article will 
highlight significant recommendations 
which frequently occasion questions. 


Records management policies 

The Commissioner has frequently em- 
phasized that good record keeping prac- 
tices are an essential element in the effec- 
tive implementation of the Act. In Orders 
35 and 45, the Commissioner advised in- 
stitutions to develop clearly-stated guide- 
lines regarding records retention sched- 
ules, particularly where the institution 
adopts practices that go beyond the mini- 
mum requirements established by regula- 
tion. 


Broadly worded requests 

In Orders 38 and 99, the Commissioner 
presented three possible responses an 
institution could make to broadly-worded 
requests. 


First, it could choose to respond literally 
to the request and conduct an institution- 
wide search for the records requested. 
Second, it could request further informa- 
tion from the requester so it could narrow 
its area ofsearch. Finally, it could narrow 
the area ofsearch unilaterally, but if doing 
so, it should outline the limits of the 
search to the requester. 


Records that may respond to a request 

In Order 38 the Commissioner also dis- 
cussed the institution’s obligation to indi- 
cate to a requester what records in its 


PRocepurAL RECOMMENDATIONS: HIGHLIGHTS OF LINDEN’s TERM — 


custody or control might respond to a 
request. Unless the institution decides to 
refuse to confirm or deny the existence of 
a record, the Commissioner indicated it 
must in its letter of response advise the 
requester which records might respond to 
the request, even if the institution is deny- 
ing access to those records. 


Reviewing records before replying to a 
request 

In Order 81 the Commissioner clarified 
that an institution must review all records 
that could respond to a request before 
responding to the requester within the 30- 
day time period. This decision addresses 
a view that the Commissioner found to be 
incorrect: the Act does not require an 
institution to review records before issu- 
ing a response to the requester, and that 
issuing a fee estimate alone constitutes a 
response within the 30-day time period. 


An institution’s interim decision 

In cases where records are unduly expen- 
sive to produce for review, the Commis- 
sioner ruled that the institution may make 
an interim decision as to access. [An 
interim decision is one that expresses the 
institution’s views as to what, if any, ex- 
emptions probably apply to the record, 
given its nature. [tis nota final decision as 
to access. 


An institution’s interim decision must 
make the requester aware of what exemp- 
tions are likely to apply, and that a final 
decision as to access has not yet been 
made. It may be accompanied by a request 
for at least partial payment of the esti- 
mated cost of producing the records. If 
the requester chooses to pay, the institu- 
tion must produce the records, review 
them and make a final decision as to ac- 
cess. 


Form of a record 

Order 50 dealt with an institution’s re- 
sponsibilities where it receives a request 
for information that doesn’t currently 
exist in the form it has been requested. 
The issue was whether the institution was 
obliged to create a record containing the 
requested information in the form it had 
been requested. 


In cases where a requestis for information 
in a recorded format different from the 
format asked for by the requester, the 
institution is required to advise the re- 
quester of what records exist. Itis then up 
to the requester to decide whether or not 
to obtain these related records, sort 
through and organize the information 
into the desired format. 


With respect to computer-generated in- 
formation, when the request relates to 
information not in the form requested, 
but reproducible from a machine-read- 
able record, the Act requires the institu- 
tion to create this type of record, “subject 
to regulations”. This means providing the 
record unless the process of production 
would unreasonably interfere with the 
operations of the institution. 


Verifying the identity of the individual 

In the Commissioner’s view, in situations 
where an institution has agreed to allow 
an individual access to his or her own 
personal information, the institution is 
responsible for verifying the identity of 
the individual. If the individual person- 
ally attends at the institution, there are 
straightforward ways of providing verifi- 
cation. However, the situation is more 
difficult if an individual cannot or does 
not want to pick up the information per- 
sonally, and insists on receiving the per- 
sonal information by mail or other means. 
The Commissioner indicated that institu- 
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Edited by: Peter Hanks and John D. McCamus 


Some of the most difficult access to infor- 
mation and privacy issues arise in the 
context of the surveillance activities of 
national security agencies. Given the 
extraordinary powers normally conferred 
on such agencies, there is a strong public 
interest in access to information concern- 
ing their work in order to hold such agen- 
cies accountable. On the other hand, it is 
obvious that national security work can- 
not be effectively conducted in a fish bowl. 
The need for some level of secrecy in such 
matters is normally recognized by exemp- 
tions for this purpose in access to infor- 
mation and privacy laws. Similarly, on the 
privacy side, the inherently intrusive na- 
ture of surveillance work for national 
security purposes raises a host of privacy 
protection concerns. And yet, it is obvi- 
ous that full protection of the privacy 
interest is incompatible with effective 
security work. These issues came to have 
a prominent place in the Canadian politi- 
cal agenda in the wake of national security 
scandals arising from the work of the 
Security Service of the RCMP. Asa result 
of the report of the McDonald Commis- 
sion, a new security service, CSIS, was 
established and, as well, an elaborate set 
of accountability devices were estab- 
lished, including the new Security and In- 
telligence Review Committee. 


These new arrangements are considered 
at length in a number of the papers col- 
lected in this volume which includes con- 
tributions by the founding Chair of the 
review committee, Ronald Atkey, the first 
director of CSIS, Ted Finn and a useful 
survey of possible methods of accounta- 
bility by C.E.S. Franks. 


The performance of the Review Commit- 
tee in its watchdog role is assessed by John 
McCamus inan introductory survey chap- 
ter. As well, the volume includes an inter- 
esting series of papers dealing with the 
question of publicaccess to national secu- 
rity information. Jeff Sallot and Reg 
Whitaker, both of whom have written 
extensively On national security issues, 
offer the perspectives ofa journalist and a 
historian, respectively. The legal aspects 
of the access question are considered 
thoroughly by Murray Rankin with par- 
ticular emphasis placed on the federal 
Canadian access legislation. 


In addition to access and privacy issues, 
papers are included on questions relating 
to the legitimacy of the limits typically 
imposed on disclosure by public servants. 
A philosopher, Leslie Green, provides an 
interesting analysis of the limits of the 
moral claim placed upon public servants 
by their duty of loyalty and carves out 
some room for the exercise of a unilateral 
right to disclose. The “new”, “improved” 
security system of the federal government 
is exposed to careful scrutiny by Stuart 
Farson. Kenneth P. Swan in a paper 
titled, “Whistle-blowing and National 
Security”, offers interesting suggestions 
with respect to the kinds of mechanisms 
that might be put in place so as to ensure 
that public servants who engage in 
whistle-blowing are not subjected to arbi- 
trary dismissal or other punitive meas- 
ures. 


In addition to the foregoing topics, the 


volume includes sections on terrorism 
and on the relationship between the 
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administration of criminal justice and 
national security matters. As well, the 
book includes some comparative discus- 
sion concerning recent developments in 
Australia and the United States. 


The collection is based on a series of 
papers first presented at a conference at 
Osgoode Hall Law School of York Uni- 
versity where McCamus is a professor and 
former Dean and where Hanks, at the 
time of the the conference, was a visisting 
professor. The book contains much of 
interest to readers with an interest in 
access and privacy issues. More than this, 
however, the book offers discussion of an 
interesting range of accountability ques- 
tions of which access to information 

forms only a part, albeit an important one. 

One comes away from a reading of this 

volume with a strong sense of a remark- 

able Canadian capacity for institutional 

innovation and for vigorous cCiritical 

analysis in the attempt to balance the 

conflicting demands for secrecy and open- 

ness in this complex area. The papers are 

generally well written. The authors bring 

an interesting mixture of backgrounds 

and perspectives to their analysis of these 

intriguing questions. 


John Eichmanis 


(The book is published by Les Editions 
Yvon Blais Inc.) 
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tions should adopt a flexible approach to such 
demands, while at the same time taking all rea- 
sonable steps to verify the identity of the re- 
quester. 


Notifying the requester of the head’s decision 
The Commissioner commented in Order 81 that 
institutions should not take a narrow interpreta- 
tion of the notice requirements. The institution 
has an obligation to fully apprise the requester 
of the details of the institution’s reasons for 
dealing with the record in a certain manner. 


The Section Index of Commissioner’s Orders 
produced regularly by the Freedom of Informa- 
tion and Privacy Branch, Management Board of 
Cabinet, lists several other procedural recom- 
mendations made by Commissioner Sidney 
Linden, which may be of assistance to institu- 
tions when determining their responsibilities 
under the Act. 
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FREEDOM OF INFORMATION AND PRIVACY 
TRACKING SYSTEM USERS 


The Information and Privacy Commissioner/Ontario is developing 
a new electronic tracking system which will be available to provin- 
cial and municipal Freedom of Information and Privacy Coordina- 
tors in November 1990. Based on two years’ experience with the 
current tracking system, substantial revisions are being made. 


The new system will be easier to learn and use, and will be flexible 
enough to meet the individual needs of coordinators. It will pro- 
duce one standard report for the year-end annual review, but 
coordinators will also be able to create their own reports. The 
system’s design will be versatile enough so that individual, extra 
features can be added, with the ability to “archive” request data 
from previous years and recall it if necessary. Users will be able to 
transfer data contained in the current system to the new tracking 
system without needing to re-key the information. 


The only requirements necessary to use the new system will be an 
IBM/PC or 100 per cent compatible machine, a little time and a 
little patience. The system will be provided at no cost, accompanied 
by a user’s manual. The manual will assist in learning the program 
and will serve as a reference for problem-solving. 


More information will be made available over the course of the 
summer; and users will be able to request the new system in the fall. 
Ifyou are interested in receiving additional information, please call 
the IPC’s Systems Branch at (416) 326-3333. 


THE THREE YEAR REVIEW 


The Standing Committee on the Legis- 
lative Assembly has rescheduled its 
review of the Freedom of Information 
and Protection of Privacy Act, 1987 until 
mid to late September. 


Updates and the outcome of the review 
will be reported in a future issue of the 
Newsletter when available. 


